The FrodoBots EarthRover Mini+ firmware version 6.2.4_6.2.5_0.614.0 uses an insecure STM32 firmware update mechanism. Firmware updates are fetched over unencrypted HTTP, and integrity is only checked using MD5 hashes transmitted in the same unprotected response. There is no code-signing mechanism, allowing attackers to potentially replace the firmware with malicious code.